Skip to content
OpenAdvisories
High NCSC-2026-0309 11 CVEs

Kwetsbaarheden verholpen in Oracle Communications

Published Aug 19, 2026 · Updated Aug 19, 2026 · nl

Vendor: Oracle Product: Communications Product: Communications Billing and Revenue Management Product: Communications BRM - Elastic Charging Engine Product: Communications Order and Service Management Product: Communications Unified Inventory Management Product: communications_cloud_native_core_binding_support_function Product: communications_cloud_native_core_dbtier Product: communications_cloud_native_core_network_exposure_function Product: communications_cloud_native_core_network_repository_function Product: communications_cloud_native_core_network_slice_selection_function Product: communications_cloud_native_core_policy Product: communications_cloud_native_core_security_edge_protection_proxy Product: communications_cloud_native_core_service_communication_proxy Product: communications_cloud_native_core_unified_data_repository Product: communications_network_analytics_data_director Product: communications_network_charging_and_control Product: communications_network_integrity Product: communications_service_catalog_and_design Product: communications_unified_assurance

Summary

Oracle heeft kwetsbaarheden verholpen in verschillende Communications-modules, waaronder Oracle Communications Cloud Native Core Network Exposure Function, Oracle Commerce Guided Search en Oracle Communications Unified Inventory Management

Details

Interpretaties
De kwetsbaarheden betreffen onder andere stack-based buffer overflows, onjuiste validatie van input, prototype pollution, improper authorization, use-after-free, deserialization filter bypass, en onvoldoende toegangscontrole. Aanvallers kunnen deze kwetsbaarheden misbruiken om onder meer Denial of Service (DoS) te veroorzaken, ongeautoriseerde toegang te verkrijgen, gevoelige data te wijzigen of in te zien, arbitrary code execution uit te voeren, en volledige systeemcompromittering te bereiken. Specifiek kunnen sommige kwetsbaarheden leiden tot privilege escalatie, bypass van authenticatie, en remote code execution zonder authenticatie. De kwetsbaarheden zijn aanwezig in diverse versies van de genoemde producten en modules, waarbij sommige fixes reeds zijn uitgebracht in specifieke versies. Controleer daarom of de specifieke kwetsbaarheden van toepassing zijn op het eigen systeem.

Oplossingen
Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Het wordt aanbevolen om de meest recente versies van de betreffende producten te installeren, zoals Oracle Communications Cloud Native Core Network Exposure Function versie 24.2.1 en hoger, Oracle Commerce Guided Search 11.4.0 en hoger, en de updates voor Oracle Communications Unified Inventory Management vanaf versie 8.0.2. Daarnaast zijn er patches beschikbaar voor de overige genoemde producten en modules. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 11

  • Critical 9.8
    CVE-2026-29167

    Apache HTTP Server: mod_ldap per-dir use-after-free

    Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2026-4176

    Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

    Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-…

    SHAY perl openjpeg2 perl Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.8
    CVE-2026-42779 Public exploit

    Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)

    The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes or primitive types) does not check the cl…

    Apache Software Foundation Apache MINA apache-nifi jenkins-2-openjdk-21 Ubuntu Wolfi Maven
  • Critical 9.1
    CVE-2026-59084

    Apache Tomcat: EncryptInterceptor requirements not clearly documented

    Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 8.1
    CVE-2026-4800 Public exploit

    lodash vulnerable to Code Injection via `_.template` imports key names

    The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as …

    lodash lodash lodash-amd lodash-es Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2025-13151

    CVE-2025-13151

    Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

    gnutls libtasn1 gnutls libtasn1-6 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2026-42587

    Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

    Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit decompression buffer size and prevent decompression bomb attacks. This limit is c…

    netty io.netty netty netty-codec-http Debian Wolfi Maven
  • High 7.5
    CVE-2026-71142

    Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Se…

    Oracle Oracle Communications Unified Inventory Management
  • High 7.4
    CVE-2026-5795

    Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

    In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing t…

    Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  • High 7.4
    CVE-2026-71143

    Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Th…

    Oracle Oracle Communications Unified Inventory Management
  • Medium 6.5
    CVE-2026-55956

    Apache Tomcat: Security constraints for default servlet ignored method

    Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of the constraint. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven

Revision history

  1. #1.0.0

    Initiele versie

References

  • Reference
    https://www.oracle.com/security-alerts/cspuaug2026.html